From 59321f2682707b6447bb4bdd3ba91f93c45394e6 Mon Sep 17 00:00:00 2001
From: Dietmar Maurer <dietmar@proxmox.com>
Date: Thu, 9 Feb 2012 11:26:37 +0100
Subject: [PATCH] do not allow to change system user passwords

---
 PVE/API2/AccessControl.pm | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/PVE/API2/AccessControl.pm b/PVE/API2/AccessControl.pm
index a3829fd..0ef31fa 100644
--- a/PVE/API2/AccessControl.pm
+++ b/PVE/API2/AccessControl.pm
@@ -260,6 +260,8 @@ __PACKAGE__->register_method ({
 	    } else {
 		# only root may change root password
 		raise_perm_exc() if $userid eq 'root@pam';
+		# do not allow to change system user passwords
+		raise_perm_exc() if $realm eq 'pam';
 	    }
 	}
 
-- 
2.39.2